CVE-2015-0260

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
kallithea-scmkallithea
0.1
rhodecoderhodecode_enterprise
𝑥
≤ 2.2.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/oss-sec/2015/q1/505
http://www.securityfocus.com/bid/72573
https://exchange.xforce.ibmcloud.com/vulnerabilities/100888
https://kallithea-scm.org/security/cve-2015-0260.html
https://rhodecode.com/blog/rhodecode-enterprise-security-release/
http://seclists.org/oss-sec/2015/q1/505
http://www.securityfocus.com/bid/72573
https://exchange.xforce.ibmcloud.com/vulnerabilities/100888
https://kallithea-scm.org/security/cve-2015-0260.html
https://rhodecode.com/blog/rhodecode-enterprise-security-release/